Case Study #4: Why should businesses participate in Public-Private Partnerships for Cybersecurity? Case Scenario: A large regional utility company has been approached by a federally funded research and development organization (FFRDC) which is recruiting companies for participation in a government initiated public-private partnership designed to improve cybersecurity for the energy sector. The utility distributes both natural gas and electricity across a three state area that includes both urban and rural households and businesses. The utility company’s board of directors is not familiar with the concept of public-private partnerships. They have hired your small consulting firm to help them make an informed decision. Their biggest question is “What’s in this for us?” The second looming question is what types of resources would they be expected to contribute to the effort (e.g. money, personnel, facilities)? Your immediate (quick response) task is to research and write a three page issues brief which addresses public-private partnerships, the types of cybersecurity improvements which could be addressed by such a partnership, the potential benefits to industry partners, and the potential risks and/or costs in resources. Please note: if you have written a similar paper or assignment for other courses, you may consult that work but you may NOT reuse it. You must write a new white paper that specifically addresses the requirements of this assignment. Research: Read / Review the Week 7 readings. Research the concepts and structures for public-private partnerships as a means of furthering public policy goals. Your starting resources are: What are Public Private Partnerships (World Bank) http://ppp.worldbank.org/public-private-partnership/overview/what-are-public-private-partnerships The Policy Cycle http://www.policynl.ca/policydevelopment/policycycle.html Research existing or proposed public-private partnerships in cybersecurity and critical infrastructure protection. Here are some sources to get you started: http://www.lawandsecurity.org/Portals/0/Documents/Cybersecurity.Partnerships.pdf http://csis.org/files/publication/130819_tech_summary.pdf http://www.hsgac.senate.gov/hearings/strengthening-public-private-partnerships-to-reduce-cyber-risks-to-our-nations-critical-infrastructure http://www.hsgac.senate.gov/download/?id=66d59b29-25ac-4dc1-a3af-040dcfe3bd38 http://www.hsgac.senate.gov/download/?id=5a70808b-ff76-411d-9075-5b21c7398bf5 Research the DHS led public-private partnership for Critical Infrastructure Cybersecurity improvements. You should also review the requirements and provisions of the NIST Cybersecurity Framework for Critical Infrastructure Protection. Find out why DHS is encouraging the adoption of this framework. http://www.dhs.gov/blog/2014/02/12/dhs-launches-c%C2%B3-voluntary-program https://www.us-cert.gov/ccubedvp https://www.us-cert.gov/sites/default/files/c3vp/smb/CCubedVP_Outreach_and_Messaging_Kit_SMB.pdf Find additional sources which provide information about public-private partnerships for cybersecurity, i.e. Information Sharing and Analysis Centers (ISACs) or Information Sharing and Analysis Organizations. Here are two overview /directory web pages to help you get started. http://www.dhs.gov/isao https://www.nationalisacs.org/member-isacs Write: Write a two to three page summary of your research. At a minimum, your summary must include the following: An introduction or overview for public-private partnerships which provides definitions and addresses the laws, regulations, and policies which permit this type of cooperation between federal, state, and local governments and private companies such as your customer (the utility company). This introduction should be suitable for an executive audience. A separate section which provides an overview of public-private partnerships for cybersecurity which addresses the types of activities which the utility company could reasonably be expected to contribute to (cybersecurity activities for energy sector critical infrastructures). You should provide 3 or more specific examples. An analysis of whether or not participation in a public-private partnership is likely to have benefits for the utility company (with specific examples of those benefits). After you address the benefits, address the problem of costs and/or risks which the company could expect to face (with specific examples). (One risk to consider is how much information about company operations could be exposed to the federal government.) A recommendation with justification or rationale for which, if any, existing or proposed public-private partnerships in which the utility company should consider participation. A separate closing section in which you summarize your research and recommendation(s). Your white paper should use standard terms and definitions for cybersecurity and privacy. The following sources are recommended: ISACA Glossary http://www.isaca.org/pages/glossary.aspx Guidelines on Security and Privacy in Public Cloud Computing http://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-144.pdf Submit For Grading Submit your case study in MS Word format (.docx or .doc file) using the Case Study #1 Assignment in your assignment folder. (Attach the file.) Formatting Instructions Use standard APA formatting for the MS Word document that you submit to your assignment folder. Formatting requirements and examples are found under Course Resources > APA Resources. Additional Information You are expected to write grammatically correct English in every assignment that you submit for grading. Do not turn in any work without (a) using spell check, (b) using grammar check, (c) verifying that your punctuation is correct and (d) reviewing your work for correct word usage and correctly structured sentences and paragraphs. You are expected to credit your sources using in-text citations and reference list entries. Both your citations and your reference list entries must comply with APA 6th edition Style requirements. Failure to credit your sources will result in penalties as provided for under the university’s Academic Integrity policy.

    Public-Retired Joint-interests control Cybersecurity

    Introduction

    Public-Retired Joint-interests are a legislation commencement/ blessing that is protracted to blessing preparers in the retired sector and legislation subsidized feeble trade achievement ventures (Busch et al., 2012). A Collective-Retired Joint-share is caused and managed by a collocation of the legislation and the retired sector blessing preparers. The blessing preparers can be multiple or a unmarried existence. The stipulations of the joint-share can either be long-term, medium-term or short-term. The conformity obligates the retired sector blessing preparer to prepare blessings to the collective control a detail time. There is couple deep suspect that the legislation makes which bias its determination to acquire into Collective-Retired Joint-interests. Firstly, to off-set chief shortages control legislation plans, and secondly where there is a need control affixed expertise and aptitude in the endowment of a plan.

    Some favoring laws and regulations influence the society and address of a happy Joint-share betwixt the legislation and the retired sector. A divergent tenet control joint-interests exists control diversified countries and organizations, twain global and topical companies. Control exemplification, the United Nations Commission on International Trade Law that was published to legislate the infrastructural l contemplation of plans that are retiredly funded. The regulations were meant to influence the bombardment of retired media in retired infrastructure.

    Expected Use a Society Is to Contribute to A Joint-interest

    The society can be effectual to extension its compressiveness and ability to prop strategic blessing preparation to the collective. It should be effectual to yield plans and blessings among the budacquire constraints of the legislation and those of its operations (Dunn-Cavelty et al., 2009). The arrangement of Collective-Retired Joint-share should be effectual to should be effectual to cause jobs and fantastic experiences control twain the legislation and the solicitous associates. The society’s fruits and blessings effect spacious national recollection gone legislation plans taracquire divergent magnitude of the kingdom. A society that acquires into a Collective-Retired joint-share stands to blessing from improved and over subsidized infrastructure. The use society can institute a cheerful urbane fiction a happy joint-share with the legislation.

    Potential Demerits of a Retired Collective Joint-interest

    Political and collective machinations may give some plans enigmatical to yield. Their lavishs that are associated with strategic legislation plans frequently discountenance retired sector blessing preparer’s controlm accepting to have-a-share in legislation plans. The scariest romance control the assiduity is the deviation of the share trounces. Also, legislation plans fixed positive contracts expense merely, in subject there are income concurrently the practice, they do not attributable attributable attributable accrue to the retired blessing preparer (Brinkerhoff et al., 2011). The legislation stands to abandon collective expectation if a plan fails uniform if the blessing preparer was the single at failure. This is consequently Collective-Retired Joint-interests heave the countenance of the legislation gone it is either entirely or hardly confused in the plan. Economic changes and share trounce deviations may carry to past income gone most legislation plans are long-term and some macroeconomic factors such as inflation are inconstantly lasting.

    Recommendations

    I would vehemently praise retired sector competition in legislation plans such as cyber pawn in the enthusiasm sector. Such a joint-share can be of huge blessing to twain the retired and the collective sectors consequently the legislation has the infrastructure and the retired sector has the know-how and techniques control ensuring aptitude.

    Conclusion

    Public-Retired Joint-interests are an commencement of the legislation that is contemplationed to determine that the collective receives a fruit or blessing immediately where there are expedients constraints in the say period blessinging the blessing preparer twain in the short-term and in the long-term. The joint-share ought to be influenced by favoring rules and regulations that eneffectual twain parties to get the blessings of participating in the plan as well-behaved-behaved as salubrious the lavish of the collective missing extinguished on a strategic fruit or blessing

    References

    Busch, N. E., & Givens, A. D. (2012). Collective-retired joint-interests in homeland pawn: Opportunities and challenges. Homeland Pawn Affairs, 8(1).

    Dunn-Cavelty, M., & Suter, M. (2009). Collective-Retired Joint-interests are no silver bullet: An spacious governance type control Critical Infrastructure Protection. International Journal of Critical Infrastructure Protection, 2(4), 179-187.

    Appendix 1

    Sample Collective-Retired Sector Joint-interest

    Source: INSA